From the course: Cisco CCNP Security SCOR v1.1 (350-701) Cert Prep

Unlock this course with a free trial

Join today to access over 24,800 courses taught by industry experts.

Email

Email

- [Presenter] Many experts believe that email data exfiltration is one of the most dangerous threat vectors. One of the main reasons for this concern is the large amount of devices that the average user employs to access their email. This includes laptops, phones, tablets, and even watches. It's also a vector that can be used easily by either internal actors or in other words, employees with bad intentions, or external actors. As we've discussed with HTTP and HTTPS data exfiltration, email is another very prevalent traffic item on our networks. It's estimated that worldwide, we send and receive over 300 billion emails each day. So this is an obvious way that we can hide data exfiltration within legitimate communication channels. With an inside threat, this is very simply where an employee with access to sensitive information would send that out to themselves using their own personal account as a recipient, or that would be sent to another recipient external to the business. We also…

Contents